3750 MQC QoS Policy Map not matching packets

[kimtoovey]

I am trying to setup a simple Policy to Mark Ingress packets to a default of IP Precedence 1. I have a class that matches an ACL to mark packets IP Precedence 0.

Here is basic polic-map I am using to test the basics...

ip access-list standard TEST

permit any

class-map match-any TEST

match access-group name TEST

!

!

policy-map TESTMARK

class TEST

  set dscp cs1

I have a Port-Channel with 4 members. Applied the map to the physicals.

fa 1/0/1 - 4

service-policy input TESTMARK

Finding I don't get any hits on the show policy-map i i

FastEthernet1/0/1

  Service-policy input: TESTMARK

    Class-map: TEST (match-any)

      0 packets, 0 bytes

      5 minute offered rate 0 bps, drop rate 0 bps

      Match: access-group name TEST

        0 packets, 0 bytes

        5 minute rate 0 bps

    Class-map: class-default (match-any)

      0 packets, 0 bytes

      5 minute offered rate 0 bps, drop rate 0 bps

      Match: any

        0 packets, 0 bytes

        5 minute rate 0 bps

FastEthernet1/0/2

  Service-policy input: TESTMARK

    Class-map: TEST (match-any)

      0 packets, 0 bytes

This seems like a basic task however it has me stumped at the moment.

[IAN WHITMORE]

This might sound silly, but did you turn qos on?

#mls qos

[cadet alain]

Hi,

You won't be able to see the marking like this on a switch. You'll have to sniff on a host receiving traffic or configure an egress ACL on the port connected to destination and match on on dscp with a log option.

Regards.

Alain.

[Alexander Maroukian]

Hi,

Use "show mls qos interface FastEthernet1/0/1 statistics" to verify.

Regards,

Alex

[Amit Aneja · Accepted solution]

The command 'show policy-map interface ' is not supported on the 3750:

Though visible in the command-line help string, the control-plane and interface keywords

are not supported, and the statistics shown in the display should be ignored.

You would want to use: 'show mls qos interface statistics'

Regards,

Amit

[kimtoovey]

Thanks all for the quick response. I was only looking at these outputs initially and was bothered by the line "qos mode:port-based"

Whilst I have applied the PM to a physical I was wondering if the switch would report on use of MQC.

Switch#sh mls qos interface fa 1/0/1

FastEthernet1/0/1

Attached policy-map for Ingress: TESTMARK

trust state: not trusted

trust mode: not trusted

trust enabled flag: ena

COS override: dis

default COS: 0

DSCP Mutation Map: Default DSCP Mutation Map

Trust device: none

qos mode: port-based

Output of  Switch#sh mls qos interface fastEthernet 1/0/1 statistics

FastEthernet1/0/1 (All statistics are in packets)

  dscp: incoming

-------------------------------

  0 -  4 :          39            0            0            0            0

  5 -  9 :           0            0            0            0            0

10 - 14 :           0            0            0            0            0

15 - 19 :           0            0            0            0            0

20 - 24 :           0            0            0            0            0

25 - 29 :           0            0            0            0            0

30 - 34 :           0            0            0            0            0

35 - 39 :           0            0            0            0            0

40 - 44 :           0            0            0            0            0

45 - 49 :           0            0            0            0            0

50 - 54 :           0            0            0            0            0

55 - 59 :           0            0            0            0            0

60 - 64 :           0            0            0            0

So thanks for pointers. Looks like I was getting the desired result. Now I will be building up the policy to hopefully police CS0's data rate.

[Alexander Maroukian]

Hi,

If you consider your question is answered please mark it as answered. So that will be helpfull for the others.

Regards,

Alex